$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft File: IAg9TfqETFcnVYxMdW2yDfgHzYE.mft (raw, json) Hash identifier: UFqNv+woK5tgk1bJJm1av4dAEipwlAcy0FxM3ySLFQM= Subject key identifier: EA:CB:E3:E5:33:D2:7D:31:F8:7C:A9:BD:24:F6:E6:49:4F:CC:68:DA Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Certificate serial: 269E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft Manifest number: 2659 Signing time: Thu 02 May 2024 16:00:57 +0000 Manifest this update: Thu 02 May 2024 16:00:56 +0000 Manifest next update: Thu 09 May 2024 16:00:56 +0000 Files and hashes: 1: IAg9TfqETFcnVYxMdW2yDfgHzYE.crl (hash: x+Z+lWpBRFoHP46aAaLtTIBD/FxYNEYEMa6l1skiDf8=) 2: B9AC3CD4B0F011E5A08A224DC4F9AE02.roa (hash: +C0H9iO1JZcp0c/y1sCnis/fXzlgXy3aSlCWjjfktW8=) 3: BD84664CB0F011E5A08A224DC4F9AE02.roa (hash: ypylJ892kUN6xUFILwG9fLQBDgZ/yIeuXrgwvy505ic=) 4: BBF567AEB0F011E5A08A224DC4F9AE02.roa (hash: ECJvzVF/ddOKPZqPx88tl4BSL0nolv0vRY0MAsu/HPU=) 5: AE887848662211E7BC7E2636C4F9AE02.roa (hash: ganw9twfBoWLQ8FwFYzaHqAPHs/cs0Tt9VdziGAqXiE=) 6: 42724A42D87811E98F4DC832C4F9AE02.roa (hash: qcgU/GCVfhlt8+6BT6YjpdZJPe73OmEnE25ObDmzrqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9886 (0x269e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Validity Not Before: May 2 16:00:56 2024 GMT Not After : May 9 16:00:56 2024 GMT Subject: CN=6633b8b9-3953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:78:85:82:ce:24:3d:7d:9c:42:3a:03:f8:08: fd:a2:f0:dc:bb:02:1b:ed:3f:74:cd:ff:d5:87:db: f4:2f:b3:0b:aa:03:d7:86:69:90:b6:c6:c4:2f:0c: ef:ad:2e:85:b8:66:e2:a8:ce:4f:f8:42:ba:80:80: 4c:88:81:c9:82:4c:47:d4:5e:cb:47:11:a7:f2:0b: 72:0f:65:07:03:57:bb:79:ab:7d:9b:ae:c7:d7:ae: a2:54:ad:47:cd:29:69:6f:bc:3a:9e:d5:ab:1c:00: 8f:68:ca:80:7c:b7:9c:64:f4:d8:6d:42:03:b4:80: 95:78:d9:36:a2:b9:80:af:f7:a9:b2:24:e1:95:b8: 60:69:76:ae:38:e6:69:4f:b1:69:94:16:58:20:8f: 99:f8:fc:06:c3:49:06:b9:3f:3d:ef:0e:77:27:4f: 4b:72:0a:9b:80:23:f8:8e:e9:38:c7:3f:15:27:db: 3d:ff:5e:d9:05:8f:9f:39:12:16:a2:cd:f4:d2:1c: 0f:f0:bd:df:4f:ac:69:08:4c:3b:dc:a8:73:5a:df: f9:7b:7c:a5:fe:88:4f:aa:a1:c8:c5:82:e1:ea:5b: 3c:7d:f9:da:a6:67:fc:a1:5c:1b:85:c1:e4:e8:fa: 3e:7b:b1:26:26:2a:f4:d1:93:51:f9:8e:c1:6d:5c: e0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CB:E3:E5:33:D2:7D:31:F8:7C:A9:BD:24:F6:E6:49:4F:CC:68:DA X509v3 Authority Key Identifier: keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:32:ee:b7:87:f0:39:7e:20:92:1b:2d:8a:e4:90:b1:f7:cb: b4:27:aa:c2:cd:8a:28:d6:c3:e0:38:94:56:d3:83:ba:e3:63: 64:ce:bc:32:5e:8c:23:fd:66:8f:f2:21:f9:39:96:35:98:f9: 4a:25:b0:09:f5:35:fc:df:bd:9a:0d:4d:d6:7a:0e:9d:8b:32: c8:19:9e:e3:3c:06:5f:ac:93:d7:31:77:b6:e3:23:3f:87:6a: 2f:3e:92:da:d7:27:a2:54:f5:37:a8:ea:a1:4c:3c:9d:0b:4e: e5:27:f4:11:88:37:95:96:ad:cc:a1:f9:e4:e6:a4:e0:9c:5b: 8e:fd:ea:de:32:6d:d2:88:d2:52:70:13:d0:07:6c:50:3a:5d: 08:4f:22:5d:a9:95:8a:45:1c:ab:c2:6e:18:18:69:8f:7e:94: 0f:4e:80:9b:7f:5c:f9:78:2d:4d:7f:e4:df:1d:c2:4a:2e:85: 18:d4:b7:26:69:14:4b:2b:f8:05:57:e1:06:84:4b:be:5d:1a: 97:3a:36:af:05:60:7e:64:59:7e:1a:0d:ca:3f:23:e9:25:b5: ea:e0:f5:ff:53:67:1a:f2:39:89:ca:8b:11:97:3e:19:82:50: 08:9f:83:10:5c:d5:93:ec:00:b2:ca:83:d7:ba:2a:6c:d1:5f: 65:fd:b4:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE RjgwN0NEODEwHhcNMjQwNTAyMTYwMDU2WhcNMjQwNTA5MTYwMDU2WjAYMRYwFAYD VQQDEw02NjMzYjhiOS0zOTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3iFgs4kPX2cQjoD+Aj9ovDcuwIb7T90zf/Vh9v0L7MLqgPXhmmQtsbELwzv rS6FuGbiqM5P+EK6gIBMiIHJgkxH1F7LRxGn8gtyD2UHA1e7eat9m67H166iVK1H zSlpb7w6ntWrHACPaMqAfLecZPTYbUIDtICVeNk2ormAr/epsiThlbhgaXauOOZp T7FplBZYII+Z+PwGw0kGuT897w53J09LcgqbgCP4juk4xz8VJ9s9/17ZBY+fORIW os300hwP8L3fT6xpCEw73KhzWt/5e3yl/ohPqqHIxYLh6ls8ffnapmf8oVwbhcHk 6Po+e7EmJir00ZNR+Y7BbVzgJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrL4+Uz 0n0x+HypvST25klPzGjaMB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3 Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6 WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUU2MC9GMTk5NjcxMkM3Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRG Y25WWXhNZFcyeURmZ0h6WUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKMu63h/A5fiCSGy2K5JCx98u0J6rCzYoo1sPgOJRW04O642Nkzrwy Xowj/WaP8iH5OZY1mPlKJbAJ9TX8372aDU3Weg6dizLIGZ7jPAZfrJPXMXe24yM/ h2ovPpLa1yeiVPU3qOqhTDydC07lJ/QRiDeVlq3Mofnk5qTgnFuO/ereMm3SiNJS cBPQB2xQOl0ITyJdqZWKRRyrwm4YGGmPfpQPToCbf1z5eC1Nf+TfHcJKLoUY1Lcm aRRLK/gFV+EGhEu+XRqXOjavBWB+ZFl+Gg3KPyPpJbXq4PX/U2ca8jmJyosRlz4Z glAIn4MQXNWT7ACyyoPXuips0V9l/bSM -----END CERTIFICATE-----Generated at Thu May 2 17:43:52 2024 by rpki-client on console-fra.rpki-client.org